CVE-2019-7915: Magento 2 Community Edition DoS vulnerability

May 24, 2022 (updated July 14, 2023)

A denial-of-service vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. Under certain conditions, an unauthenticated attacker could force the Magento store’s full page cache to serve a 404 page to customers.

References

github.com/advisories/GHSA-prw8-gqwp-f7fh
nvd.nist.gov/vuln/detail/CVE-2019-7915
web.archive.org/web/20211206084839/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13

Code Behaviors & Features

Detect and mitigate CVE-2019-7915 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →